Vulnerability Research Analyst
Two Six Technologies · Linthicum, Maryland
About the role
A vulnerability research analyst at Two Six Technologies who evaluates the security of specialised COTS and GOTS systems using AI-driven evaluation harnesses, working from extracted source code and firmware images rather than hardware. The analyst runs static and dynamic analysis, applies AI-guided fuzzing and automated bug-finding suites, checks their output by tracing code paths to confirm root cause and exploitability, writes CodeQL, Semgrep and AST-based rules that capture new bug patterns, and presents risk findings and metrics to program managers and intelligence community partners.
Two Six wants experience in vulnerability research, source code review, reverse engineering or security audits, and a solid grasp of memory management and common software flaws. Firmware emulation with QEMU or Unicorn and custom test harnesses help. An active TS/SCI with polygraph is required, on-site in Linthicum, Maryland.